set_real_ip_from  192.168.0.0/16;
set_real_ip_from  172.16.0.0/12;
set_real_ip_from  100.64.0.0/10;
set_real_ip_from  10.0.0.0/8;
real_ip_header    X-Forwarded-For;
real_ip_recursive on;

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

map $scheme $msiis {
    http off;
    https on;
}

server {
    listen 80;
    server_name _;

    root /app/www/;
    location / {
        try_files $uri $uri/ /index.html;
    }

    add_header 'Access-Control-Allow-Origin' '*';
    add_header 'Access-Control-Allow-Credentials' 'true';
    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
    add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';

    location /api/ {
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Credentials' 'true';
        add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        add_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
        proxy_set_header 'Access-Control-Allow-Origin' '*';
        proxy_set_header 'Access-Control-Allow-Credentials' 'true';
        proxy_set_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
        proxy_set_header 'Access-Control-Allow-Headers' 'DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
        proxy_http_version              1.1;
        proxy_set_header                Host $host;
        proxy_set_header                Accept-Encoding   "";
        proxy_set_header                X-Real-IP $remote_addr;
        proxy_set_header                X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header                X-Forwarded-Host $host;
        proxy_set_header                X-Forwarded-Server $host;
        proxy_set_header                X-FORWARDED-PROTOCOL $scheme;
        proxy_set_header                X-Url-Scheme $scheme;
        proxy_set_header                X-Forwarded-Proto $scheme;
        proxy_set_header                Front-End-Https   $msiis;
        proxy_headers_hash_max_size     512;
        proxy_headers_hash_bucket_size  512;
        proxy_buffering                 off;
        port_in_redirect                off;
        proxy_set_header                Upgrade $http_upgrade; # WebSocket support
        proxy_set_header                Connection $connection_upgrade; # WebSocket support
        proxy_pass                      http://127.0.0.1:3000/;
    }
}